Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File:                     9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier:          1+9hO+Gisrrr62bGteA0OO3w44eEMOPT1Qg8UhLiQLA=
Subject key identifier:   26:F9:43:86:23:CE:82:7C:92:49:A3:AA:92:5C:DC:8F:B3:EC:B1:13
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer:       /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial:       01988BB399B582A1BA7E545B762C87B603A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number:          091A
Signing time:             Fri 08 Aug 2025 22:00:59 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:59 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:59 +0000
Files and hashes:         1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
                          2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: zYMHfApmnUKVd48u8RCuTAFRs8z8b3lN8uaiEGmmZ4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:99:b5:82:a1:ba:7e:54:5b:76:2c:87:b6:03:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
        Validity
            Not Before: Aug  8 22:00:59 2025 GMT
            Not After : Aug  9 22:00:59 2025 GMT
        Subject: CN=26f9438623ce827c9249a3aa925cdc8fb3ecb113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:00:ca:a9:6c:dd:fe:d9:93:e2:c6:7b:88:
                    68:96:e9:ed:01:4d:76:7d:f6:6d:3b:46:13:56:93:
                    d0:ee:7f:b6:bd:21:8c:ef:a8:9b:17:08:38:fa:d6:
                    61:60:2c:15:79:ba:fd:0c:24:cb:e4:c1:56:8e:95:
                    c4:03:c3:ca:6e:58:c3:cb:95:15:09:1b:b6:8e:2b:
                    41:c8:3b:4e:c5:e4:c3:99:ac:a0:3b:bb:a9:f4:68:
                    3c:72:1e:47:bf:cd:a5:85:a7:bb:e3:75:2c:2d:65:
                    a4:a0:04:7b:97:4a:13:48:e0:ba:3f:4c:15:ad:94:
                    86:14:7e:3c:e0:7f:89:a4:42:c5:04:27:d4:56:29:
                    66:f1:37:46:b1:7e:79:9f:d0:d1:60:6f:0b:d5:db:
                    c3:bb:3e:bc:3c:61:e7:a8:3a:be:bc:5b:34:d4:d7:
                    10:2b:e4:b4:12:5c:94:a2:e9:96:ff:11:bd:53:cc:
                    bd:45:13:1f:75:f4:9e:8d:a2:f8:25:fd:7b:23:44:
                    63:be:0c:ad:74:ca:22:f9:47:40:a4:d6:87:2a:3a:
                    91:8d:07:fc:1e:7a:be:d9:eb:9c:5f:65:4c:23:cc:
                    c3:17:f3:ff:dd:72:34:e4:11:c3:81:91:59:2b:d6:
                    ab:6a:b9:d9:2b:bf:b1:c2:b1:fd:50:6f:7e:03:f7:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:43:86:23:CE:82:7C:92:49:A3:AA:92:5C:DC:8F:B3:EC:B1:13
            X509v3 Authority Key Identifier:
                keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:29:8a:98:4e:aa:32:e3:83:6e:96:62:96:a3:5d:59:dc:e7:
         bc:79:20:d6:3b:48:a9:92:29:44:7d:c9:dd:f2:3a:ee:dc:d7:
         00:fc:cf:4f:14:33:bd:7f:d3:2a:75:9f:9f:74:5d:8f:d9:82:
         80:6f:c0:11:08:a5:89:de:1c:1b:2c:b8:88:80:f3:36:78:02:
         7c:df:c2:3e:fd:91:93:15:9f:2e:d1:b3:53:9f:71:e5:53:fb:
         c3:e6:3e:53:43:1a:09:34:8d:66:a4:9d:20:b8:a7:59:2c:06:
         f0:de:54:4e:09:86:a0:a4:4d:1f:c0:51:21:06:7a:63:da:06:
         7b:5d:fb:7a:88:0f:e7:ba:f3:1f:c6:0a:66:f2:8c:75:3b:e8:
         2d:9b:c5:79:a6:3b:50:76:52:f0:94:c1:27:ae:59:62:f4:93:
         bb:3a:09:7c:79:1b:a3:a5:aa:79:a4:bd:10:81:bf:a6:50:84:
         be:d4:d1:42:9e:c7:70:2f:85:05:0c:64:84:ea:db:42:91:9d:
         d1:ea:c0:46:fc:f5:11:42:ea:10:e2:4a:23:f1:29:2a:1f:57:
         7b:71:dc:94:b4:dc:23:18:c4:17:63:92:df:6d:8f:e1:73:6f:
         0a:03:27:21:3c:3a:42:b1:30:0f:19:6f:78:29:a2:ee:2c:e5:
         5c:58:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:05 2025 by rpki-client